machines/mermet/users.nix

   1 { inputs, pkgs, lib, config, ... }:
   2 let
   3   inherit (builtins) readFile;
   4   inherit (config.users) users;
   5 in
   6 {
   7 imports = [
   8   ../../members/julm.nix
   9 ];
  10
  11 nix.trustedUsers = [
  12   users."julm".name
  13 ];
  14
  15 users = {
  16   mutableUsers = false;
  17   users = {
  18     root = {
  19       openssh.authorizedKeys.keys =
  20         users."julm".openssh.authorizedKeys.keys ++
  21         [ (readFile (inputs.secrets + "/machines/losurdo/ssh/root.ssh-ed25519.pub")) ];
  22       hashedPassword = "!";
  23     };
  24   };
  25   groups = {
  26     wheel.members = [
  27       users."julm".name
  28     ];
  29   };
  30 };
  31
  32 networking.nftables.ruleset = ''
  33   add rule inet filter fw2net tcp dport {25,465} skuid ${users.julm.name} counter accept comment "SMTP"
  34   add rule inet filter fw2net tcp dport 43 skuid ${users.julm.name} counter accept comment "Whois"
  35   add rule inet filter fw2net tcp dport 563 skuid ${users.julm.name} counter accept comment "NNTPS"
  36   add rule inet filter fw2net tcp dport 6697 skuid ${users.julm.name} counter accept comment "IRCS"
  37   add rule inet filter fw2net tcp dport 11371 skuid ${users.julm.name} counter accept comment "HKP"
  38 '';
  39 }